On Thu, 23 Jul 2026 at 19:13, Justin Forbes <[email protected]> wrote: > > On Thu, Jul 23, 2026 at 3:59 AM Ondrej Kozina via devel > <[email protected]> wrote: > > > > Hi Peter, > > > > On 23/07/2026 11:27, Peter Robinson wrote: > > >>> The first phase uses the upstream patches due to land shortly, likely > > >>> in 7.3, to limit the use of the API to the known apps and restricts > > >>> the use. This allows Fedora to identify unknown users and gracefully > > >>> deal with them before the active demise of the interface upstream > > >>> providing users a more graceful process rather than universally > > >>> pulling the rug without any notice. > > >> > > >> I don't understand what is the purpose of this change request. Do you > > >> want to take additional steps beyond what kernel upstream currently > > >> plans and switch off AF_ALG in before it's limited by upstream kernel? > > >> Do you plan to "backport" those patches in earlier fedora kernels? Or > > >> it's simply to announce that there's a upstream kernel change coming and > > >> people should get ready for it? > > > > > > It's primarily communication and awareness and adding the upstream > > > pieces at a release boundary, F-45 will ship with the 7.2 kernel, we > > > don't want the upstream patches heading to 7.3 to suddenly break users > > > mid release when upstream yanks whatever rug they choose whenever they > > > choose. It doesn't make for a good user experience does it? > > > > > > > Ok, public awareness aside (which I agree with), are there any Fedora > > specific steps planned above what the upstream kernel plans to do? > > Somewhat. I do plan to disable it completely for F46. If upstream > doesn't do so first, it can still be enabled in F45, but that will be > the last release.
The plan that Justin and I had discussed is to pull back the upstream patches limiting the access so that things that are allowed, like cryptsetup, bluetooth etc still continue to work, and if there's others that are identified we can adjust the allow list and work with upstream kernel and those users to migrate. Peter -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
